> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/harness-platform/3.0/harness-platform-resources/platform-access-control/permissions-reference.md).

# Permissions reference

This topic describes permissions relevant to [RBAC in Harness](/harness-ai/use-harness-platform/platform-access-control.md). For API permissions, go to the [API permissions reference](/harness-ai/use-harness-platform/automation/api/api-permissions-reference.md).

{% hint style="info" %}
**Types of Permission**:

```
| **Status**       | **Description**                                               |
|------------------|---------------------------------------------------------------|
| **EXPERIMENTAL** | Available for role assignment but RBAC will not be enforced, that is the access checks always return true. |
| **ACTIVE**       | Available for role assignment with RBAC enforced.                                  |
| **DEPRECATED**   | Available for role assignment with RBAC enforced but the permission will be moved to the INACTIVE state after some time.  |
| **INACTIVE**     | No longer supported and access checks always return true.                              |
```

{% endhint %}

### Administrative Functions <a href="#administrative-functions" id="administrative-functions"></a>

| Resource         | Permissions                                                                                                                                                                            | Status |
| ---------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Resource Groups  | <ul><li>View (<code>core\_resourcegroup\_view</code>)</li><li>Create/Edit (<code>core\_resourcegroup\_edit</code>)</li><li>Delete (<code>core\_resourcegroup\_delete</code>)</li></ul> | Active |
| Account Settings | Available at the account [scope](/harness-ai/use-harness-platform/platform-access-control.md#permissions-hierarchy-scopes) only.                                                       |        |

* View (\`core\_setting\_view\`)
* Edit (\`core\_setting\_edit\`)

\| Active | | Default Settings |

* Create/Edit

\| Active | | Projects |

* View (\`core\_project\_view\`)
* Create (\`core\_project\_create\`)
* Edit (\`core\_project\_edit\`)
* Delete (\`core\_project\_delete\`)
* Move (\`core\_project\_move\`)

\| Active | | User Groups |

* View (`core_usergroup_view`)
* Manage: Create, edit, and delete user groups (`core_usergroup_manage`) – Default permission.
  * ***Note**: You can enable feature flags to split the default `Manage` permission into granular permissions for finer control.*
  * Create (`core_usergroup_create`)
  * Edit metadata (`core_usergroup_editMetadata`)
  * Delete (`core_usergroup_delete`)
  * Manage users (`core_usergroup_manageUsers`)
  * Manage through SSO (`core_usergroup_manageSSO`)
  * Manage through SCIM (`core_usergroup_manageSCIM`)
  * Manage notifications (`core_usergroup_manageNotifications`)
  * Manage role assignments (`core_usergroup_manageRoleAssignments`)

\| Active | | Service Accounts |

* View (\`core\_serviceaccount\_view\`)
* Create/Edit (\`core\_serviceaccount\_edit\`)
* Delete (\`core\_serviceaccount\_delete\`)
* Manage: Create, edit, and delete API keys and tokens for service accounts (\`core\_serviceaccount\_manageapikey\`)
* List Service Accounts (\`core\_serviceaccount\_list\`)

\| Active | | Organizations | Available at the account and org \[scopes]\(<https://app.gitbook.com/s/3F2TpHXhur2QtQnORSM9/use-harness-platform/platform-access-control#permissions-hierarchy-scopes>) only.

* View (\`core\_organization\_view\`)
* Create (\`core\_organization\_create\`)
* Edit (\`core\_organization\_edit\`)
* Delete (\`core\_organization\_delete\`)

\| Active | | Roles |

* View (\`core\_role\_view\`)
* Create/Edit (\`core\_role\_edit\`)
* Delete (\`core\_role\_delete\`)

\| Active | | Streaming Destination | Available at the account \[scope]\(<https://app.gitbook.com/s/3F2TpHXhur2QtQnORSM9/use-harness-platform/platform-access-control#permissions-hierarchy-scopes>) only.

* View (\`core\_streamingDestination\_view\`)
* Create/Edit (\`core\_streamingDestination\_edit\`)
* Delete (\`core\_streamingDestination\_delete\`)

\| Experimental | | Banners | Available at the account \[scope]\(<https://app.gitbook.com/s/3F2TpHXhur2QtQnORSM9/use-harness-platform/platform-access-control#permissions-hierarchy-scopes>) only.

* View (\`core\_banner\_view\`)
* Create/Edit (\`core\_banner\_edit\`)
* Delete (\`core\_banner\_delete\`)

\| Active | | Users |

* View (\`core\_user\_view\`)
* Manage: Edit and delete users (\`core\_user\_manager\`)
* Invite: Add users by inviting them to Harness (\`core\_user\_invite\`)
* Impersonate Users (\`core\_user\_impersonate\`)

\| Active | | Authentication Settings | Available at the account \[scope]\(<https://app.gitbook.com/s/3F2TpHXhur2QtQnORSM9/use-harness-platform/platform-access-control#permissions-hierarchy-scopes>) only.

* View (\`core\_authsetting\_view\`)
* Create/Edit (\`core\_authsetting\_edit\`)
* Delete (\`core\_authsetting\_delete\`)

\| Active | | SMTP Configuration |

* View (\`core\_smtp\_view\`)
* Create/Edit (\`core\_smtp\_edit\`)
* Delete (\`core\_smtp\_delete\`)

\| Active | | Certificates |

* View (\`core\_certificate\_view\`)
* Create/Edit (\`core\_certificate\_edit\`)
* Delete (\`core\_certificate\_delete\`)

\| Active | | Account Management |

* View (\`core\_account\_view\`)
* Edit (\`core\_account\_edit\`)

\| Active | | Licenses |

* View (\`core\_license\_view\`)
* Edit (\`core\_license\_edit\`)

\| Active | | Audit |

* View (\`core\_audit\_view\`)

\| Active | | Deployment Freezes |

* Manage (\`core\_deploymentfreeze\_manage\`)
* Global (\`core\_deploymentfreeze\_global\`)

\| Active | | Providers |

* View (\`core\_provider\_view\`)
* Create/Edit (\`core\_provider\_edit\`)
* Delete (\`core\_provider\_delete\`)

\| Experimental |

### Monitoring <a href="#monitoring" id="monitoring"></a>

| Resource                 | Permissions                                                                                                                                                                                                                                                               | Status       |
| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| Monitoring Agents        | <ul><li>View (<code>monitoring\_monitoringagent\_view</code>)</li><li>Create (<code>monitoring\_monitoringagent\_create</code>)</li><li>Edit (<code>monitoring\_monitoringagent\_edit</code>)</li><li>Delete (<code>monitoring\_monitoringagent\_delete</code>)</li></ul> | Experimental |
| Service Level Objectives | <ul><li>View (<code>iro\_iromanager\_view</code>)</li><li>Create (<code>iro\_iromanager\_create</code>)</li><li>Edit (<code>iro\_iromanager\_edit</code>)</li><li>Delete (<code>iro\_iromanager\_delete</code>)</li></ul>                                                 | Experimental |

### Environment Groups <a href="#environment-groups" id="environment-groups"></a>

| Resource           | Permissions                                                                                                                                                                                                                                                                                                       | Status |
| ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Environment Groups | <ul><li>View (<code>core\_environmentgroup\_view</code>)</li><li>Create/Edit (<code>core\_environmentgroup\_edit</code>)</li><li>Delete (<code>core\_environmentgroup\_delete</code>)</li><li>Access: Can access referenced environment groups at runtime (<code>core\_environmentgroup\_access</code>)</li></ul> | Active |

### Environments <a href="#environments" id="environments"></a>

| Resource     | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | Status |
| ------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Environments | <ul><li>View (<code>core\_environment\_view</code>)</li><li>Create/Edit (<code>core\_environment\_edit</code>)</li><li>Delete (<code>core\_environment\_delete</code>)</li><li>Access: Can access referenced environments at runtime (<code>core\_environment\_access</code>)</li><li>Rollback (<code>core\_environment\_rollback</code>)</li><li>View FF SDK Key: View Feature Flag environment key (<code>ff\_environment\_apiKeyView</code>)</li><li>Create FF SDK Key: Create Feature Flag environment key (<code>ff\_environment\_apiKeyCreate</code>)</li><li>Delete FF SDK Key: Delete Feature Flag environment key (<code>ff\_environment\_apiKeyDelete</code>)</li></ul> | Active |

### Pipelines <a href="#pipelines" id="pipelines"></a>

| Resource  | Permissions                                                                                                                                                                                                                                                                                                        | Status |
| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| Pipelines | <ul><li>View (<code>core\_pipeline\_view</code>)</li><li>Create/Edit (<code>core\_pipeline\_edit</code>)</li><li>Delete (<code>core\_pipeline\_delete</code>)</li><li>Execute: Initiate pipeline runs (<code>core\_pipeline\_execute</code>)</li><li>Abort Pipeline (<code>core\_pipeline\_abort</code>)</li></ul> | Active |

### Services <a href="#services" id="services"></a>

| Resource | Permissions                                                                                                                                                                                                                                                         | Status |
| -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Services | <ul><li>View (<code>core\_service\_view</code>)</li><li>Create/Edit (<code>core\_service\_edit</code>)</li><li>Delete (<code>core\_service\_delete</code>)</li><li>Access: Can access referenced services at runtime (<code>core\_service\_access</code>)</li></ul> | Active |

### Shared Resources <a href="#shared-resources" id="shared-resources"></a>

| Resource                | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Status |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| Templates               | <ul><li>View (<code>core\_template\_view</code>)</li><li>Create/Edit (<code>core\_template\_edit</code>)</li><li>Delete (<code>core\_template\_delete</code>)</li><li>Access: Can access referenced templates at runtime (<code>core\_template\_access</code>)</li><li>Copy (<code>core\_template\_copy</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                        | Active |
| Deployment Freeze       | <ul><li>Manage (<code>core\_deploymentfreeze\_manager</code>)</li><li>Override (<code>core\_deploymentfreeze\_override</code>)</li><li>Global (<code>global</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Active |
| Secrets                 | <ul><li>View (<code>core\_secret\_view</code>)</li><li><p>Create/Edit (<code>core\_secret\_edit</code>) – Default permission.</p><ul><li><em><strong>Note</strong>: You can enable feature flags to split the default <code>Create/Edit</code> permission into separate <code>Create</code> and <code>Edit</code> permissions for more granular control. See the</em> <a href="/pages/o08BdaNMbDd5tW21Q1LH#secrets"><em>documentation</em></a> <em>for details.</em></li><li>Create (<code>core\_secret\_create</code>)</li><li>Edit (<code>core\_secret\_edit</code>)</li></ul></li><li>Delete (<code>core\_secret\_delete</code>)</li><li>Access (<code>core\_secret\_access</code>)</li></ul> | Active |
| Connectors              | <ul><li>View (<code>core\_connector\_view</code>)</li><li>Create/Edit (<code>core\_connector\_edit</code>)</li><li>Delete (<code>core\_connector\_delete</code>)</li><li>Access: Can access referenced connectors at runtime (<code>core\_connector\_access</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                    | Active |
| Variables               | <ul><li>View (<code>core\_variable\_view</code>)</li><li>Create/Edit (<code>core\_variable\_edit</code>)</li><li>Delete (<code>core\_variable\_delete</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | Active |
| Files                   | <ul><li>View (<code>core\_file\_view</code>)</li><li>Create/Edit (<code>core\_file\_edit</code>)</li><li>Delete (<code>core\_file\_delete</code>)</li><li>Access (<code>core\_file\_access</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | Active |
| Dashboards              | <ul><li>View (<code>core\_dashboards\_view</code>)</li><li>Manage (<code>core\_dashboards\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | Active |
| Delegate Configurations | <ul><li>View (<code>core\_delegateconfiguration\_view</code>)</li><li>Create/Edit (<code>core\_delegateconfiguration\_edit</code>)</li><li>Delete (<code>core\_delegateconfiguration\_delete</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | Active |
| Delegates               | <ul><li>View (<code>core\_delegate\_view</code>)</li><li>Create/Edit (<code>core\_delegate\_edit</code>)</li><li>Delete (<code>core\_delegate\_delete</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | Active |

### Policies <a href="#policies" id="policies"></a>

| Resource               | Permissions                                                                                                                                                                                                                                                                                                                                | Status |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| Governance Policies    | <ul><li>View (<code>core\_governancePolicy\_view</code>)</li><li>Edit (<code>core\_governancePolicy\_edit</code>)</li><li>Create (<code>core\_governancePolicy\_create</code>)</li><li>Analyse Access Policies (<code>core\_accessPolicies\_analyze</code>)</li><li>Delete (<code>core\_governancePolicy\_delete</code>)</li></ul>         | Active |
| Governance Policy Sets | <ul><li>View (<code>core\_governancePolicySets\_view</code>)</li><li>Edit (<code>core\_governancePolicySets\_edit</code>)</li><li>Create (<code>core\_governancePolicySets\_create</code>)</li><li>Delete (<code>core\_governancePolicySets\_delete</code>)</li><li>Evaluate (<code>core\_governancePolicySets\_evaluate</code>)</li></ul> | Active |

### Discovery <a href="#discovery" id="discovery"></a>

| Resource    | Permissions                                                                                                                                                                                                                                                                   | Status |
| ----------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Network Map | <ul><li>View (<code>servicediscovery\_networkmap\_view</code>)</li><li>Create (<code>servicediscovery\_networkmap\_create</code>)</li><li>Edit (<code>servicediscovery\_networkmap\_edit</code>)</li><li>Delete (<code>servicediscovery\_networkmap\_delete</code>)</li></ul> | Active |

### Supply Chain Security <a href="#supply-chain-security" id="supply-chain-security"></a>

| Resource            | Permissions                                                                                                                                                                                         | Status |
| ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Remediation Tracker | <ul><li>View (<code>ssca\_remediationtracker\_view</code>)</li><li>Create/Edit (<code>ssca\_remediationtracker\_edit</code>)</li><li>Close (<code>ssca\_remediationtracker\_close</code>)</li></ul> | Active |

### Webhooks <a href="#webhooks" id="webhooks"></a>

| Resource | Permissions                                                                                                                                                                         | Status |
| -------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Webhooks | <ul><li>View (<code>core\_gitxWebhooks\_view</code>)</li><li>Create/Edit (<code>core\_gitxWebhooks\_edit</code>)</li><li>Delete (<code>core\_gitxWebhooks\_delete</code>)</li></ul> | Active |

### Notifications <a href="#notifications" id="notifications"></a>

| Resource              | Permissions                                                                                                                                                                                              | Status       |
| --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| Notification Rules    | <ul><li>View (<code>core\_notificationrule\_view</code>)</li><li>Create/Edit (<code>core\_notificationrule\_edit</code>)</li><li>Delete (<code>core\_notificationrule\_delete</code>)</li></ul>          | EXPERIMENTAL |
| Notification Channels | <ul><li>View (<code>core\_notificationchannel\_view</code>)</li><li>Create/Edit (<code>core\_notificationchannel\_edit</code>)</li><li>Delete (<code>core\_notificationchannel\_delete</code>)</li></ul> | EXPERIMENTAL |
| Legacy Notifications  | <ul><li>View (<code>core\_notification\_view</code>)</li><li>Create/Edit (<code>core\_notification\_edit</code>)</li><li>Delete (<code>core\_notification\_delete</code>)</li></ul>                      | DEPRECATED   |

### Input Sets <a href="#input-sets" id="input-sets"></a>

| Resource   | Permissions                                                                                                                                                                                           | Status |
| ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Input Sets | <ul><li>View Input Set (<code>core\_inputset\_view</code>)</li><li>Create/Edit Input Set (<code>core\_inputset\_edit</code>)</li><li>Delete Input Set (<code>core\_inputset\_delete</code>)</li></ul> | Active |

### Module-specific permissions <a href="#module-specific-permissions" id="module-specific-permissions"></a>

#### Chaos Engineering <a href="#chaos-engineering" id="chaos-engineering"></a>

| Resource                  | Permissions                                                                                                                                                                                                                                                                                                                                    | Status |
| ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Chaos Infrastructure      | <ul><li>View (<code>chaos\_chaosinfrastructure\_view</code>)</li><li>Create/Edit (<code>chaos\_chaosinfrastructure\_edit</code>)</li><li>Delete (<code>chaos\_chaosinfrastructure\_delete</code>)</li></ul>                                                                                                                                    | Active |
| Chaos Gameday             | <ul><li>View (<code>chaos\_chaosgameday\_view</code>)</li><li>Create/Edit (<code>chaos\_chaosgameday\_edit</code>)</li><li>Delete (<code>chaos\_chaosgameday\_delete</code>)</li></ul>                                                                                                                                                         | Active |
| Chaos Hub                 | <ul><li>View: View Chaos experiments and Chaos scenarios (<code>chaos\_chaoshub\_view</code>)</li><li>Create/Edit: Connect to ChaosHub Git repo (<code>chaos\_chaoshub\_edit</code>)</li><li>Delete: Disconnect ChaosHub Git repo (<code>chaos\_chaoshub\_delete</code>)</li></ul>                                                             | Active |
| Chaos Experiment          | <ul><li>View (<code>chaos\_chaosexperiment\_view</code>)</li><li>Create/Edit (<code>chaos\_chaosexperiment\_edit</code>)</li><li>Delete (<code>chaos\_chaosexperiment\_delete</code>)</li><li>Execute (<code>chaos\_chaosexperiment\_execute</code>)</li><li>Execute Pipeline (<code>chaos\_chaosexperiment\_executepipeline</code>)</li></ul> | Active |
| Chaos Probe               | <ul><li>View (<code>chaos\_chaosprobe\_view</code>)</li><li>Create/Edit (<code>chaos\_chaosprobe\_edit</code>)</li><li>Delete (<code>chaos\_chaosprobe\_delete</code>)</li></ul>                                                                                                                                                               | Active |
| Chaos Security Governance | <ul><li>View (<code>chaos\_chaossecuritygovernance\_view</code>)</li><li>Create/Edit (<code>chaos\_chaossecuritygovernance\_edit</code>)</li><li>Delete (<code>chaos\_chaossecuritygovernance\_delete</code>)</li></ul>                                                                                                                        | Active |
| Chaos Image Registry      | <ul><li>View (<code>chaos\_chaosimageregistry\_view</code>)</li><li>Create/Edit (<code>chaos\_chaosimageregistry\_edit</code>)</li></ul>                                                                                                                                                                                                       | Active |

#### Cloud Cost Management <a href="#cloud-cost-management" id="cloud-cost-management"></a>

| Resource                           | Permissions                                                                                                                                                                                                                                                                                | Status       |
| ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------ |
| Currency Preferences               | <ul><li>View (<code>ccm\_currencyPreference\_view</code>)</li><li>Create/Edit (<code>ccm\_currencyPreference\_edit</code>)</li></ul>                                                                                                                                                       | Active       |
| Overview                           | <ul><li>View (<code>ccm\_overview\_view</code>)</li></ul>                                                                                                                                                                                                                                  | Active       |
| Cost Categories                    | <ul><li>View (<code>ccm\_costCategory\_view</code>)</li><li>Create/Edit (<code>ccm\_costCategory\_edit</code>)</li><li>Delete (<code>ccm\_costCategory\_delete</code>)</li></ul>                                                                                                           | Active       |
| Folders                            | <ul><li>View (<code>ccm\_folder\_view</code>)</li><li>Create/Edit (<code>ccm\_folder\_edit</code>)</li><li>Delete (<code>ccm\_folder\_delete</code>)</li></ul>                                                                                                                             | Active       |
| Perspectives                       | <ul><li>View (<code>ccm\_perspective\_view</code>)</li><li>Create/Edit (<code>ccm\_perspective\_edit</code>)</li><li>Delete (<code>ccm\_perspective\_delete</code>)</li></ul>                                                                                                              | Active       |
| AutoStopping Rules                 | <ul><li>View (<code>ccm\_autoStoppingRule\_view</code>)</li><li>Create/Edit (<code>ccm\_autoStoppingRule\_edit</code>)</li><li>Delete (<code>ccm\_autoStoppingRule\_delete</code>)</li></ul>                                                                                               | Active       |
| Budgets                            | <ul><li>View (<code>ccm\_budget\_view</code>)</li><li>Create/Edit (<code>ccm\_budget\_edit</code>)</li><li>Delete (<code>ccm\_budget\_delete</code>)</li></ul>                                                                                                                             | Active       |
| Load Balancer                      | <ul><li>View (<code>ccm\_loadBalancer\_view</code>)</li><li>Create/Edit (<code>ccm\_loadBalancer\_edit</code>)</li><li>Delete (<code>ccm\_loadBalancer\_delete</code>)</li></ul>                                                                                                           | Active       |
| Data Scope                         | <ul><li>View (<code>ccm\_dataScope\_view</code>)</li></ul>                                                                                                                                                                                                                                 | Active       |
| Anomalies                          | <ul><li>View (<code>ccm\_anomalies\_view</code>)</li></ul>                                                                                                                                                                                                                                 | Active       |
| Recommendations                    | <ul><li>View (<code>ccm\_recommendations\_view</code>)</li><li>Manage (<code>ccm\_recommendations\_manage</code>)</li></ul>                                                                                                                                                                | Active       |
| Commitment Orchestrator            | <ul><li>View (<code>ccm\_commitmentOrchestrator\_view</code>)</li><li>Edit (<code>ccm\_commitmentOrchestrator\_edit</code>)</li></ul>                                                                                                                                                      | Active       |
| Cluster Orchestrator               | <ul><li>View (<code>ccm\_clusterOrchestrator\_view</code>)</li><li>Edit (<code>ccm\_clusterOrchestrator\_edit</code>)</li></ul>                                                                                                                                                            | Experimental |
| Cloud Asset Governance Rule        | <ul><li>View (<code>ccm\_cloudAssetGovernanceRule\_view</code>)</li><li>Create/Edit (<code>ccm\_cloudAssetGovernanceRule\_edit</code>)</li><li>Delete (<code>ccm\_cloudAssetGovernanceRule\_delete</code>)</li><li>Execute (<code>ccm\_cloudAssetGovernanceRule\_execute</code>)</li></ul> | Active       |
| Cloud Asset Governance Rule Set    | <ul><li>View (<code>ccm\_cloudAssetGovernanceRuleSet\_view</code>)</li><li>Create/Edit (<code>ccm\_cloudAssetGovernanceRuleSet\_edit</code>)</li><li>Delete (<code>ccm\_cloudAssetGovernanceRuleSet\_delete</code>)</li></ul>                                                              | Active       |
| Cloud Asset Governance Enforcement | <ul><li>View (<code>ccm\_cloudAssetGovernanceEnforcement\_view</code>)</li><li>Create/Edit (<code>ccm\_cloudAssetGovernanceEnforcement\_edit</code>)</li><li>Delete (<code>ccm\_cloudAssetGovernanceEnforcement\_delete</code>)</li></ul>                                                  | Active       |

#### Code Repository <a href="#code-repository" id="code-repository"></a>

| Resource   | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 | Status |
| ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Repository | <ul><li>View (<code>code\_repo\_view</code>)</li><li>Create/Edit (Create repositories and edit repository settings, such as descriptions, webhooks, and rules) (<code>code\_repo\_edit</code>)</li><li>Delete (<code>code\_repo\_delete</code>)</li><li>Push (Repository contributor permissions, such as committing, pushing, creating/deleting branches, creating/deleting tags) (<code>code\_repo\_push</code>)</li><li>Report commit check : Report a Status Check Result on a Commit (<code>code\_repo\_reportCommitCheck</code>)</li><li>Review PR: Review Pull Requests in a Code Repository (<code>code\_repo\_review</code>)</li><li>Create Repository (<code>code\_repo\_create</code>)</li></ul> | Active |

#### Feature Flags <a href="#feature-flags" id="feature-flags"></a>

| Resource          | Permissions                                                                                                                                                                                                                                                                                                                                                                                        | Status |
| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Feature flags     | <ul><li>View (<code>ff\_featureflag\_view</code>)</li><li>Toggle: Turn Feature Flags on/off (<code>ff\_featureflag\_toggle</code>)</li><li>Create/Edit Flag (<code>ff\_featureflag\_edit</code>)</li><li>Edit Rule (<code>ff\_featureflag\_rulesEdit</code>)</li><li>Edit Configuration (<code>ff\_featureflag\_configEdit</code>)</li><li>Delete (<code>ff\_featureflag\_delete</code>)</li></ul> | Active |
| Target Management | <ul><li>View: View Targets and Target Groups (<code>ff\_targetgroup\_view</code>)</li><li>Create/Edit: Create and edit Targets and Target Groups to control visibility of a variation of a Feature Flag (<code>ff\_targetgroup\_edit</code>)</li><li>Delete: Delete Targets and Target Groups (<code>ff\_targetgroup\_delete</code>)</li></ul>                                                     | Active |
| Feature Flag      | <ul><li>Create (<code>ff\_featureflag\_create</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                    | Active |
| Target            | <ul><li>View (<code>ff\_target\_view</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                             | Active |
| Environment       | <ul><li>View (<code>ff\_environment\_view</code>)</li><li>Edit (<code>ff\_environment\_edit</code>)</li><li>Target Group Edit (<code>ff\_environment\_targetGroupEdit</code>)</li></ul>                                                                                                                                                                                                            | Active |
| Proxy API Keys    | <ul><li>View (<code>ff\_proxyapikey\_view</code>)</li><li>Create (<code>ff\_proxyapikey\_create</code>)</li><li>Edit (<code>ff\_proxyapikey\_edit</code>)</li><li>Delete (<code>ff\_proxyapikey\_delete</code>)</li><li>Rotate (<code>ff\_proxyapikey\_rotate</code>)</li></ul>                                                                                                                    | Active |

#### GitOps <a href="#gitops" id="gitops"></a>

| Resource                | Permissions                                                                                                                                                                                                                                                       | Status       |
| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| Clusters                | <ul><li>View (<code>gitops\_cluster\_view</code>)</li><li>Create/Edit (<code>gitops\_cluster\_edit</code>)</li><li>Delete (<code>gitops\_cluster\_delete</code>)</li></ul>                                                                                        | Active       |
| Agents                  | <ul><li>View (<code>gitops\_agent\_view</code>)</li><li>Create/Edit (<code>gitops\_agent\_edit</code>)</li><li>Delete (<code>gitops\_agent\_delete</code>)</li></ul>                                                                                              | Active       |
| GnuPG Keys              | <ul><li>View (<code>gitops\_gpgkey\_view</code>)</li><li>Create/Edit (<code>gitops\_gpgkey\_edit</code>)</li><li>Delete (<code>gitops\_gpgkey\_delete</code>)</li></ul>                                                                                           | Active       |
| Repository Certificates | <ul><li>View (<code>gitops\_gpgkey\_view</code>)</li><li>Create/Edit (<code>gitops\_gpgkey\_edit</code>)</li><li>Delete (<code>gitops\_gpgkey\_delete</code>)</li></ul>                                                                                           | Active       |
| Applications            | <ul><li>View (<code>gitops\_application\_view</code>)</li><li>Create/Edit (<code>gitops\_application\_edit</code>)</li><li>Delete (<code>gitops\_application\_delete</code>)</li><li>Sync: Deploy applications (<code>gitops\_application\_sync</code>)</li></ul> | Active       |
| Application Sets        | <ul><li>View (<code>gitops\_applicationset\_view</code>)</li><li>Create/Edit (<code>gitops\_applicationset\_edit</code>)</li><li>Delete (<code>gitops\_applicationset\_delete</code>)</li></ul>                                                                   | Experimental |
| Repositories            | <ul><li>View (<code>gitops\_repository\_view</code>)</li><li>Create/Edit (<code>gitops\_repository\_edit</code>)</li><li>Delete (<code>gitops\_repository\_delete</code>)</li></ul>                                                                               | Active       |
| Certificates            | <ul><li>View (<code>gitops\_cert\_view</code>)</li><li>Create/Edit (<code>gitops\_cert\_edit</code>)</li><li>Delete (<code>gitops\_cert\_delete</code>)</li></ul>                                                                                                 | Active       |

#### Infrastructure as Code <a href="#infrastructure-as-code" id="infrastructure-as-code"></a>

| Resource        | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                     | Status       |
| --------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| IACM Workspaces | <ul><li>View (<code>iac\_workspace\_view</code>)</li><li>Create/Edit (<code>iac\_workspace\_edit</code>)</li><li>Delete (<code>iac\_workspace\_delete</code>)</li><li>Create/Edit Variables (<code>iac\_workspace\_editvariable</code>)</li><li>Delete Variables (<code>iac\_workspace\_deletevariable</code>)</li><li>Approve (<code>iac\_workspace\_approve</code>)</li><li>Access State (<code>iac\_workspace\_accessstate</code>)</li></ul> | Active       |
| Registry        | <ul><li>View (<code>iac\_registry\_view</code>)</li><li>Create/Edit (<code>iac\_registry\_edit</code>)</li><li>Delete (<code>iac\_registry\_delete</code>)</li></ul>                                                                                                                                                                                                                                                                            | Active       |
| Variable Sets   | <ul><li>View (<code>iac\_variableset\_view</code>)</li><li>Create/Edit (<code>iac\_variableset\_edit</code>)</li><li>Delete (<code>iac\_variableset\_delete</code>)</li></ul>                                                                                                                                                                                                                                                                   | Experimental |

#### Service Reliability <a href="#service-reliability" id="service-reliability"></a>

| Resource           | Permissions                                                                                                                                                                                                                                                                                | Status |
| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| SLO                | <ul><li>View (<code>chi\_slo\_view</code>)</li><li>Create/Edit (<code>chi\_slo\_edit</code>)</li><li>Delete (<code>chi\_slo\_delete</code>)</li></ul>                                                                                                                                      | Active |
| Monitored Services | <ul><li>View (<code>chi\_monitoredservice\_view</code>)</li><li>Create/Edit (<code>chi\_monitoredservice\_edit</code>)</li><li>Delete (<code>chi\_monitoredservice\_delete</code>)</li><li>Toggle: Toggle Monitored Services on/off (<code>chi\_monitoredservice\_toggle</code>)</li></ul> | Active |
| Downtime           | <ul><li>View (<code>chi\_downtime\_view</code>)</li><li>Create/Edit (<code>chi\_downtime\_edit</code>)</li><li>Delete (<code>chi\_downtime\_delete</code>)</li></ul>                                                                                                                       | Active |

#### Security Tests <a href="#security-tests" id="security-tests"></a>

| Resource         | Permissions                                                                                                                                                                        | Status |
| ---------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Issues           | <ul><li>View (<code>sto\_issue\_view</code>)</li></ul>                                                                                                                             | Active |
| Scans            | <ul><li>View (<code>sto\_scan\_view</code>)</li></ul>                                                                                                                              | Active |
| Test Targets     | <ul><li>View (<code>sto\_testtarget\_view</code>)</li><li>Create/Edit (<code>sto\_testtarget\_edit</code>)</li></ul>                                                               | Active |
| Exemptions       | <ul><li>View (<code>sto\_exemption\_view</code>)</li><li>Create/Edit (<code>sto\_exemption\_create</code>)</li><li>Approve/Reject (<code>sto\_exemption\_approve</code>)</li></ul> | Active |
| External Tickets | <ul><li>View (<code>sto\_ticket\_view</code>)</li><li>Create/Edit (<code>sto\_ticket\_edit</code>)</li><li>Delete (<code>sto\_ticket\_delete</code>)</li></ul>                     | Active |

#### Internal Developer Portal <a href="#internal-developer-portal" id="internal-developer-portal"></a>

| Resource                | Permissions                                                                                                                                                                                                                                                   | Status |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Plugins                 | <ul><li>View (<code>idp\_plugin\_view</code>)</li><li>Create/Edit (<code>idp\_plugin\_edit</code>)</li><li>Toggle (<code>idp\_plugin\_toggle</code>)</li><li>Delete (<code>idp\_plugin\_delete</code>)</li></ul>                                              | Active |
| Scorecards              | <ul><li>View (<code>idp\_scorecard\_view</code>)</li><li>Create/Edit (<code>idp\_scorecard\_edit</code>)</li><li>Delete (<code>idp\_scorecard\_delete</code>)</li></ul>                                                                                       | Active |
| Layouts                 | <ul><li>View (<code>idp\_layout\_view</code>)</li><li>Create/Edit (<code>idp\_layout\_edit</code>)</li></ul>                                                                                                                                                  | Active |
| Catalog Access Policies | <ul><li>View (<code>idp\_catalogaccesspolicy\_view</code>)</li><li>Create (<code>idp\_catalogaccesspolicy\_create</code>)</li><li>Edit (<code>idp\_catalogaccesspolicy\_edit</code>)</li><li>Delete (<code>idp\_catalogaccesspolicy\_delete</code>)</li></ul> | Active |
| Integrations            | <ul><li>View (<code>idp\_integration\_view</code>)</li><li>Create (<code>idp\_integration\_create</code>)</li><li>Edit (<code>idp\_integration\_edit</code>)</li><li>Delete (<code>idp\_integration\_delete</code>)</li></ul>                                 | Active |
| Advanced Configurations | <ul><li>View (<code>idp\_advancedconfiguration\_view</code>)</li><li>Create/Edit (<code>idp\_advancedconfiguration\_edit</code>)</li><li>Delete (<code>idp\_advancedconfiguration\_delete</code>)</li></ul>                                                   | Active |
| Catalog                 | <ul><li>View (<code>idp\_catalog\_view</code>)</li><li>Create/Edit (<code>idp\_catalog\_edit</code>)</li><li>Delete (<code>idp\_catalog\_delete</code>)</li></ul>                                                                                             | Active |
| Workflow                | <ul><li>View (<code>idp\_workflow\_view</code>)</li><li>Create/Edit (<code>idp\_workflow\_edit</code>)</li><li>Delete (<code>idp\_workflow\_delete</code>)</li><li>Execute (<code>idp\_workflow\_execute</code>)</li></ul>                                    | Active |

#### Continuous Error Tracking <a href="#continuous-error-tracking" id="continuous-error-tracking"></a>

| Resource        | Permissions                                                                                                                                                                           | Status |
| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Tokens          | <ul><li>View (<code>cet\_token\_view</code>)</li><li>Create/Edit (<code>cet\_token\_create</code>)</li><li>Revoke (<code>cet\_token\_revoke</code>)</li></ul>                         | Active |
| Critical Events | <ul><li>View (<code>cet\_criticalevent\_view</code>)</li><li>Create/Edit (<code>cet\_criticalevent\_create</code>)</li><li>Delete (<code>cet\_criticalevent\_delete</code>)</li></ul> | Active |
| Agents          | <ul><li>View (<code>cet\_agents\_view</code>)</li></ul>                                                                                                                               | Active |

#### Database DevOps <a href="#database-devops" id="database-devops"></a>

| Resource  | Permissions                                                                                                                                                                | Status |
| --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Schemas   | <ul><li>View (<code>dbops\_schema\_view</code>)</li><li>Create/Edit (<code>dbops\_schema\_edit</code>)</li><li>Delete (<code>dbops\_schema\_delete</code>)</li></ul>       | Active |
| Instances | <ul><li>View (<code>dbops\_instance\_view</code>)</li><li>Create/Edit (<code>dbops\_instance\_edit</code>)</li><li>Delete (<code>dbops\_instance\_delete</code>)</li></ul> | Active |

#### Artifact Management <a href="#artifact-management" id="artifact-management"></a>

| Resource          | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                             | Status |
| ----------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Artifact Registry | <ul><li>View (<code>artifact\_artregistry\_view</code>)</li><li>Create/Edit (<code>artifact\_artregistry\_edit</code>)</li><li>Delete (<code>artifact\_artregistry\_delete</code>)</li><li>Upload Artifact (<code>artifact\_artregistry\_uploadartifact</code>)</li><li>Download Artifact (<code>artifact\_artregistry\_downloadartifact</code>)</li><li>Delete Artifact (<code>artifact\_artregistry\_deleteartifact</code>)</li></ul> | Active |

#### AI DLC Insights <a href="#ai-dlc-insights" id="ai-dlc-insights"></a>

| Resource                    | Permissions                                                                                                                                                                                                                                                                       | Status |
| --------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| AIDI Collections            | <ul><li>View (<code>sei\_seicollections\_view</code>)</li><li>Create (<code>sei\_seicollections\_create</code>)</li><li>Edit (<code>sei\_seicollections\_edit</code>)</li><li>Delete (<code>sei\_seicollections\_delete</code>)</li></ul>                                         | Active |
| AIDI Configuration Settings | <ul><li>View (<code>sei\_seiconfigurationsettings\_view</code>)</li><li>Create (<code>sei\_seiconfigurationsettings\_create</code>)</li><li>Edit (<code>sei\_seiconfigurationsettings\_edit</code>)</li><li>Delete (<code>sei\_seiconfigurationsettings\_delete</code>)</li></ul> | Active |
| AIDI Data Settings          | <ul><li>View (<code>sei\_seidatasettings\_view</code>)</li><li>Create (<code>sei\_seidatasettings\_create</code>)</li><li>Edit (<code>sei\_seidatasettings\_edit</code>)</li><li>Delete (<code>sei\_seidatasettings\_delete</code>)</li></ul>                                     | Active |
| AIDI Insights               | <ul><li>View (<code>sei\_seiinsights\_view</code>)</li><li>Create (<code>sei\_seiinsights\_create</code>)</li><li>Edit (<code>sei\_seiinsights\_edit</code>)</li><li>Delete (<code>sei\_seiinsights\_delete</code>)</li></ul>                                                     | Active |
| AIDI Insight Categories     | <ul><li>View (<code>sei\_seiinsightscategory\_view</code>)</li></ul>                                                                                                                                                                                                              | Active |
| AIDI Teams                  | <ul><li>View (<code>sei\_seiteams\_view</code>)</li><li>Create (<code>sei\_seiteams\_create</code>)</li><li>Edit (<code>sei\_seiteams\_edit</code>)</li><li>Delete (<code>sei\_seiteams\_delete</code>)</li></ul>                                                                 | Active |
| AIDI Profiles               | <ul><li>View (<code>sei\_seiprofiles\_view</code>)</li><li>Create (<code>sei\_seiprofiles\_create</code>)</li><li>Edit (<code>sei\_seiprofiles\_edit</code>)</li><li>Delete (<code>sei\_seiprofiles\_delete</code>)</li></ul>                                                     | Active |
| AIDI Studio                 | <ul><li>View (<code>sei\_seicanvas\_view</code>)</li><li>Create (<code>sei\_seicanvas\_create</code>)</li><li>Edit (<code>sei\_seicanvas\_edit</code>)</li><li>Delete (<code>sei\_seicanvas\_delete</code>)</li></ul>                                                             | Active |

#### Feature Management and Experimentation <a href="#feature-management-and-experimentation" id="feature-management-and-experimentation"></a>

| Resource         | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                | Status |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| FME Environment  | <ul><li>View (<code>fme\_fmeenvironment\_view</code>)</li><li>Create/Edit (<code>fme\_fmeenvironment\_edit</code>)</li><li>SDK API Key View (<code>fme\_fmeenvironment\_sdkApiKeyView</code>)</li><li>SDK API Key Edit (<code>fme\_fmeenvironment\_sdkApiKeyEdit</code>)</li><li>Data Export View (<code>fme\_fmeenvironment\_dataExportView</code>)</li><li>Data Export Edit (<code>fme\_fmeenvironment\_dataExportEdit</code>)</li></ul> | Active |
| FME Feature Flag | <ul><li>View (<code>fme\_fmefeatureflag\_view</code>)</li><li>Create/Edit (<code>fme\_fmefeatureflag\_edit</code>)</li><li>Archive (<code>fme\_fmefeatureflag\_archive</code>)</li><li>Unarchive (<code>fme\_fmefeatureflag\_unarchive</code>)</li></ul>                                                                                                                                                                                   | Active |
| FME Experiment   | <ul><li>View (<code>fme\_fmeexperiment\_view</code>)</li><li>Create/Edit (<code>fme\_fmeexperiment\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                 | Active |
| FME Segment      | <ul><li>View (<code>fme\_fmesegment\_view</code>)</li><li>Create/Edit (<code>fme\_fmesegment\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                       | Active |
| FME Metric       | <ul><li>View (<code>fme\_fmemetric\_view</code>)</li><li>Create/Edit (<code>fme\_fmemetric\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                         | Active |
| FME Traffic Type | <ul><li>View (<code>fme\_fmetraffictype\_view</code>)</li><li>Create/Edit (<code>fme\_fmetraffictype\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                               | Active |
